Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
File: xGglzBDkwis4XEo3r5DzC2iBQRo.mft (raw, json)
Hash identifier: vGH/h78PQ77bJyjiFKR/unEJO2kdYMyU6nH0oqt10Q0=
Subject key identifier: BD:C8:39:F8:3B:78:32:A8:FE:16:8B:7A:D3:66:03:EA:07:92:8B:4D
Authority key identifier: C4:68:25:CC:10:E4:C2:2B:38:5C:4A:37:AF:90:F3:0B:68:81:41:1A
Certificate issuer: /CN=c46825cc10e4c22b385c4a37af90f30b6881411a
Certificate serial: 0197BB58D626B7E6E4A6E776F4FC38F5A39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
Manifest number: 0691
Signing time: Sun 29 Jun 2025 11:00:50 +0000
Manifest this update: Sun 29 Jun 2025 11:00:50 +0000
Manifest next update: Mon 30 Jun 2025 11:00:50 +0000
Files and hashes: 1: xGglzBDkwis4XEo3r5DzC2iBQRo.crl (hash: bUuPQurRImfKJmZQ3v3djw57wc2i2wgSnKFUzTCNVtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:58:d6:26:b7:e6:e4:a6:e7:76:f4:fc:38:f5:a3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c46825cc10e4c22b385c4a37af90f30b6881411a
Validity
Not Before: Jun 29 11:00:50 2025 GMT
Not After : Jun 30 11:00:50 2025 GMT
Subject: CN=bdc839f83b7832a8fe168b7ad36603ea07928b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4b:11:85:f3:82:c8:2e:75:70:78:8e:f6:73:
26:75:63:32:d2:46:f8:25:99:88:dc:5b:8a:04:41:
ea:fb:90:ee:95:14:6f:7a:0c:bb:f2:92:78:4d:71:
12:c1:2f:a5:27:35:fd:3e:a5:21:78:00:3a:c3:88:
16:d9:26:0b:4c:1e:d5:93:95:3f:e1:76:77:52:0e:
09:8d:7b:bf:0d:b0:1f:38:6f:b2:b4:91:08:33:86:
e7:67:d6:bb:cf:86:76:38:55:b1:3f:da:ff:f4:7b:
1b:93:55:3f:34:54:e9:41:4b:9c:3a:e5:55:c7:64:
bc:b3:7c:70:2f:71:0f:1d:90:c5:68:62:1d:4d:e1:
c7:f2:e7:d0:9a:88:3d:67:a4:7f:ed:48:78:62:8d:
1b:85:ce:1e:f2:66:68:d6:8c:0c:45:92:9f:17:6f:
ae:ee:f2:75:ab:3d:f8:49:5f:ea:ae:5c:9a:ed:f0:
9b:3e:f8:da:10:bc:09:70:43:20:fe:a0:b5:e8:73:
7c:c0:c7:f0:69:e9:68:e5:26:39:2b:21:72:61:42:
96:7b:5e:5e:15:0b:20:d2:7f:dc:87:97:4c:eb:97:
87:e3:f4:6f:e7:8f:8e:68:3d:22:79:8e:d0:c3:6f:
77:03:72:b4:7c:93:75:84:3f:8a:f8:4e:a9:f6:39:
07:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C8:39:F8:3B:78:32:A8:FE:16:8B:7A:D3:66:03:EA:07:92:8B:4D
X509v3 Authority Key Identifier:
keyid:C4:68:25:CC:10:E4:C2:2B:38:5C:4A:37:AF:90:F3:0B:68:81:41:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d8:fd:a9:f0:a2:51:4e:2d:37:90:e8:f6:eb:93:ca:71:bb:
18:d9:6c:93:2b:29:d6:b2:83:90:b4:e3:ff:ae:38:42:a9:43:
52:4e:2f:5e:92:83:b1:6f:8c:f7:f3:65:91:f9:80:e0:b8:ed:
7b:be:bb:f7:c7:22:1d:74:a3:00:4d:5c:1d:9e:b5:23:44:15:
93:da:41:ab:17:7f:e0:5b:29:f2:ea:33:80:90:54:67:46:d7:
79:d1:b8:1a:fb:e8:de:73:cd:1c:1c:79:61:0c:be:38:7e:03:
a5:2b:1c:e1:6b:51:c1:54:17:ef:f5:b9:33:7f:5f:d0:94:dd:
7a:27:f4:fb:72:5c:8e:62:9c:45:73:4e:dc:2b:cc:e4:8a:7c:
18:aa:83:d7:3e:c2:c9:bd:e6:a0:0d:20:a5:b6:80:46:25:bb:
3e:09:0d:01:56:bc:31:54:3b:29:09:fe:1f:47:65:6f:b0:31:
c2:29:49:55:84:44:96:db:7e:64:8a:c4:e4:3e:6e:f7:9e:69:
8c:3a:e8:e4:86:92:02:69:47:f1:6a:4b:b6:24:60:57:87:c3:
0d:0c:be:71:fe:5c:b0:e7:1b:c6:e4:a4:4b:ee:f0:6b:02:15:
03:c7:8b:59:97:f2:30:8f:7e:ff:98:dd:11:a1:b2:13:75:02:
b6:1a:44:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe7WNYmt+bkpud29Pw49aOeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NjgyNWNjMTBlNGMyMmIzODVjNGEzN2FmOTBmMzBiNjg4
MTQxMWEwHhcNMjUwNjI5MTEwMDUwWhcNMjUwNjMwMTEwMDUwWjAzMTEwLwYDVQQD
EyhiZGM4MzlmODNiNzgzMmE4ZmUxNjhiN2FkMzY2MDNlYTA3OTI4YjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEsRhfOCyC51cHiO9nMmdWMy0kb4
JZmI3FuKBEHq+5DulRRvegy78pJ4TXESwS+lJzX9PqUheAA6w4gW2SYLTB7Vk5U/
4XZ3Ug4JjXu/DbAfOG+ytJEIM4bnZ9a7z4Z2OFWxP9r/9Hsbk1U/NFTpQUucOuVV
x2S8s3xwL3EPHZDFaGIdTeHH8ufQmog9Z6R/7Uh4Yo0bhc4e8mZo1owMRZKfF2+u
7vJ1qz34SV/qrlya7fCbPvjaELwJcEMg/qC16HN8wMfwaelo5SY5KyFyYUKWe15e
FQsg0n/ch5dM65eH4/Rv54+OaD0ieY7Qw293A3K0fJN1hD+K+E6p9jkHAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3IOfg7eDKo/haLetNmA+oHkotNMB8GA1UdIwQY
MBaAFMRoJcwQ5MIrOFxKN6+Q8wtogUEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdnbHpCRGt3aXM0WEVvM3I1RHpDMmlCUVJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS82YTE4MDgtNmZiOC00NWM4LTk1NGUt
ZDU0OTY5NWU0MzNjLzEveEdnbHpCRGt3aXM0WEVvM3I1RHpDMmlCUVJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS82YTE4MDgtNmZiOC00NWM4LTk1NGUtZDU0OTY5NWU0MzNj
LzEveEdnbHpCRGt3aXM0WEVvM3I1RHpDMmlCUVJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHNj9qfCi
UU4tN5Do9uuTynG7GNlskysp1rKDkLTj/644QqlDUk4vXpKDsW+M9/NlkfmA4Ljt
e76798ciHXSjAE1cHZ61I0QVk9pBqxd/4Fsp8uozgJBUZ0bXedG4Gvvo3nPNHBx5
YQy+OH4DpSsc4WtRwVQX7/W5M39f0JTdeif0+3JcjmKcRXNO3CvM5Ip8GKqD1z7C
yb3moA0gpbaARiW7PgkNAVa8MVQ7KQn+H0dlb7AxwilJVYREltt+ZIrE5D5u955p
jDro5IaSAmlH8WpLtiRgV4fDDQy+cf5csOcbxuSkS+7wawIVA8eLWZfyMI9+/5jd
EaGyE3UCthpEkQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:47:21 2025 by rpki-client